Temporary Directory
The temporary directory is necessary for Drupal to function and is periodically cleaned out by the modules that use it. Proper cleaning of the temp directory requires a properly running Cron so be sure that it is functioning correctly (Chapter 3). The temporary directory should not be placed in a folder that is accessible over the Web as several modules use this space to temporarily store uploaded files. Crafty visitors may search for any sensitive or forgotten files in the temporary folder as an attempt to circumvent any security you have.
This is often set to /tmp or to a directory located with private file's parent directory. Figure 4-12 shows MAMP's temporary directory.
Temporary directory
/Applications/MAMP/tmp
A local file system path where temporary files will be stored. "Riis directory should not be accessible over the web.
FIGURE 4-12
NOTE The file field discussed in Chapter 6, "Content" can be used to implement custom file upload fields on content types. These custom fields may use different public and private settings, folder settings, allowed file types, and maximum file size settings.
Post a comment